A little bit of a newbie Cisco PIX Config problem here. Need some
help. Having trouble allowing the following ports in 995 (pop3s), 443
(https), and 53 (dns).

DNS needs to come in from 64.28.40.226 to 10.1.2.45 using pat I thought
I had this set up right but my syslog server is still saying that dns
traffic is denied from this ip.

995 and 443 need to come from one public ip at a co-lo to my whole
inside 10.1.2.0 255.255.255.0 network and I am not sure how to do this
one. Thanks


PIX Version 6.3(3)
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 intf2 security4
fixup protocol dns maximum-length 512
fixup protocol domain 53
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
access-list outside_in permit tcp any host 68.1.3.100 eq www
access-list outside_in permit tcp any any eq 3140
access-list outside_in permit tcp any any eq 104
access-list outside_in permit tcp any any eq 4006
access-list outside_in permit tcp host 64.28.40.226 any eq domain
access-list outside_in permit udp host 64.28.40.226 any eq domain
pager lines 24
logging on
logging console warnings
logging monitor warnings
logging trap warnings
logging history warnings
logging host inside 10.1.2.50
mtu outside 1500
mtu inside 1500
mtu intf2 1500
ip address outside 68.1.3.2 255.255.255.0
ip address inside 10.1.2.1 255.255.255.0
no ip address intf2
ip audit info action alarm
ip audit attack action alarm
pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) tcp interface 104 10.1.2.143 104 netmask
255.255.255.255 0 0
static (inside,outside) tcp interface 3140 10.1.2.143 3140 netmask
255.255.255.255 0 0
static (inside,outside) tcp interface 4006 10.1.2.143 4006 netmask
255.255.255.255 0 0
static (inside,outside) tcp 68.1.3.100 www 10.1.2.148 www netmask
255.255.255.255 0 0
static (inside,outside) tcp interface domain 10.1.2.45 domain netmask
255.255.255.255 0 0
static (inside,outside) udp interface domain 10.1.2.45 domain netmask
255.255.255.255 0 0
access-group outside_in in interface outside
route outside 0.0.0.0 0.0.0.0 68.1.3.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225
1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
snmp-server host inside 10.1.2.50 trap
no snmp-server location
no snmp-server contact
snmp-server community public
snmp-server enable traps
tftp-server inside 10.1.2.50 TFTP-root
floodguard enable
telnet timeout 5
ssh 0.0.0.0 0.0.0.0 outside
ssh 0.0.0.0 0.0.0.0 inside
ssh timeout 60
console timeout 0
terminal width 80
Cryptochecksum:154d215f7c747a878818cfb15c61bb52
: end